Cyber threat information processing apparatus, cyber threat information processing method, and storage medium storing cyber threat information processing program

An apparatus for providing CTI, the apparatus comprising:

• a database configured to store data;
• and
• a processor,
• wherein the processor performs operations comprising:
• an operation of receiving a CTI analysis request for a script included in a file from a client:
• an operation of analyzing the script to obtain analysis information of the CTI for the script:
• an operation of generating a CTI query related to the script based on the analysis information of the CTI and delivering the CTI query to a natural language model;
• and
• an operation of providing natural language description information according to the CTI query from the analysis information of the CTI and the natural language model to the client as visualization information.

A storage medium for storing a program for providing CTI executable by a computer, the program comprising instructions configured to:

• receive a CTI analysis request for a script included in a file from a client;
• analyze the script to obtain analysis information of the CTI for the script;
• generate a CTI query related to the script based on the analysis information of the CTI and deliver the CTI query to a natural language model;
• and
• provide natural language description information according to the CTI query from the analysis information of the CTI and the natural language model to the client as visualization information.